Retail Business Management Systems
August 14, 2026
•[ ransomware, retail, technology ]
Retail Business Management Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: rbms.com. rbms.com zoominfo.com/c/retail-business-management-systems-inc/101712744 Retail Business Management Systems (RBMS) is a specialized technology provider that has delivered Point of Sale and retail management solutions for over 25 years. Focusing heavily on NCR Counterpoint software and hardware integrations, the company supports retail businesses of all sizes primarily across the New York and New Jersey regions. Their platform serves as a central hub for merchants seeking comprehensive tools to optimize store operations, inventory tracking, and overall customer experience.
KFC Kosova
August 14, 2026
•[ ransomware, retail ]
KFC Kosova was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Hospitality. Website: kfckosova.com. kfckosova.com zoominfo.com/c/kfc-kosova/401225793 KFC Kosova is the official regional branch of the global fast-food chain, operating multiple restaurants across Kosovo, including a prominent location at the Albi Mall in Pristina. Their website serves as a central hub for customers to find nearby branches, check out menu options, and access delivery services. Additionally, the platform acts as a primary career portal for local job seekers to apply for various corporate and restaurant positions.
The Coffee Bean
August 14, 2026
•[ ransomware, retail ]
The Coffee Bean was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: Malaysia. Website: coffeebean.com.my. coffeebean.com.my zoominfo.com/c/the-coffee-bean/425047768 The Coffee Bean & Tea Leaf Malaysia is the official digital portal for the popular cafe chain, which currently operates over 150 locations across the country. The website allows customers to easily explore the full menu, access exclusive promotions, and manage their MyCBTL loyalty app rewards. It serves as a convenient central platform for ordering premium beverages, redeeming digital vouchers, and staying updated on seasonal cafe offerings.
Ollies Place Kidswear
August 14, 2026
•[ ransomware, retail ]
Ollies Place Kidswear was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: Australia. Website: olliesplace.com.au. olliesplace.com.au zoominfo.com/c/ollies-place-kidswear/359503050 Ollie's Place is an Australian retail brand specializing in high-quality, trendy, and comfortable clothing for babies and children. The company offers a unique shopping experience both online and through physical stores across Australia, featuring vibrant prints and stylish designs. They focus on providing fashionable, value-for-money pieces for kids' everyday wear and special milestones.
Carhartt, Inc.
August 13, 2026
•[ ransomware, leak, retail ]
Carhartt, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Retail & E-Commerce. Country: United States of America. Website: carhartt.com. Our demand for this Company was $3.3 million. The Company reached out. However, The Company did not try to negotiate. If The Company attempted to negotiate with us The Company would've ended up saving a good chunk of money. Instead they decided to do (see blow); this is also because The Company hired a very unskilled and incompetent negotiator. If The Company hired competency to negotiate for them, this post would've never been published. [21:24:22] carhartt: After careful review and internal discussions with leadership, we have decided not to move forward with negotiations or further discussions. We appreciate your patience throughout this process. There is millions of customers of data involved here. As we always say, these companies don't care. Millions of records of customer data and vast amount of sensitive information and PII containing employee, customer, customer metadata (royalty info), and other internal corporate data was compromised. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 50GB+ (compressed) | Updated: 13 August 2026 | SHA256: 6b37f770382ce82bfa4677466cc51d9269e5a70436eecf101fae6fa9d5d8e8ac
Connections
August 14, 2026
•[ ransomware, retail ]
Connections was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Belgium. Website: www.connections.be.
SEARS (Grupo Sanborns)
August 15, 2026
•[ ransomware, retail, technology ]
SEARS (Grupo Sanborns) was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Retail & E-Commerce. Country: Mexico. Website: www.sears.com.mx. SEARS (Grupo Sanborns, S.A. de C.V.) is a leading Mexican retail company and a key subsidiary of Grupo Carso, owned by the Slim family.Founded in 1903 by the Sanborn brothers, the company has grown into one of the countrys most iconic and successful retail groups.It owns and operates two of Mexicos most famous brands: Sears (mid-range department stores) and Sanborns (the signature store + restaurant/cafe format).Today, Grupo Sanborns manages more than 41,000 employees and hundreds of stores nationwide, with a strong focus on e-commerce and digital transformation.Website: www.sears.com.mx and www.sanborns.com.mx.AttentionDemo files will appear here in the coming days, ahead of the full-scale release. https://www.sears.com.mx/
Oz Hair & Beauty
August 15, 2026
•[ ransomware, retail ]
Oz Hair & Beauty was listed as a victim on the leak site of the xpl0itrs ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Retail & E-Commerce. Country: Australia. Website: ozhairandbeauty.com. Hair and beauty products
All Parts Dry Cleaning
August 16, 2026
•[ ransomware, retail ]
All Parts Dry Cleaning was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: allpartsdrycleaning.co.uk. Dry cleaning & laundry. Domain: allpartsdrycleaning.co.uk. | United Kingdom
Spoonful of Comfort
August 16, 2026
•[ ransomware, retail ]
Spoonful of Comfort was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Hospitality. Country: United States of America. Website: www.spoonfulofcomfort.com.
Moores
August 17, 2026
•[ ransomware, retail, manufacturing ]
Moores was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.moores.co.uk. Kitchen solutions provider for housing developers.
4M REALTY COMPANY
August 17, 2026
•[ ransomware, retail, leak ]
4M REALTY COMPANY was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Retail & E-Commerce. Country: United States of America. Website: 4mrealty.com. Country: Texas, US |
Website: 4mrealty.com |
Revenue: $5 Million |
Industry: Real Estate Brokerage, Real Estate Sales, Property Sales, Commercial Real Estate |
Employees: 20-50 |
Properties: 237 GB (54,995 Files, 4,600 Folders)
Sam Pack Auto Group
August 17, 2026
•[ ransomware, retail ]
Sam Pack Auto Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Retail & E-Commerce. Country: United States of America. Website: www.sampack.com. United States
automotoresrosedal.com.ar
August 19, 2026
•[ ransomware, retail ]
automotoresrosedal.com.ar was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Retail & E-Commerce. Country: Argentina. Website: automotoresrosedal.com.ar. Rosedal Automotores S.R.L. is an Argentine company incorporated on February 18, 2004, headquartered in the Las Caitas ...
Thrifty Building Supply
August 19, 2026
•[ ransomware, retail ]
Thrifty Building Supply was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Retail & E-Commerce. Country: United States of America. Website: www.thriftybuilding.com.
Trends And Concepts
August 20, 2026
•[ ransomware, retail ]
Trends And Concepts was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Other. Country: South Africa. Website: www.trendsandconceptsinteriors.com.
Club One Casino
August 18, 2026
•[ ransomware, retail ]
Club One Casino was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Hospitality. Country: United States of America. Website: clubonecasino.com. A Place to Play Cards in Central California
Cascade Coffee
July 30, 2026
•[ ransomware, retail, manufacturing ]
Cascade Coffee was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Retail & E-Commerce. Country: United States of America. Website: cascadecoffee.com. Cascade Coffee is a premier gourmet coffee contract manufacturer based near Seattle, Washington
, specializing in roasting, grinding, flavoring, and packaging coffee. The company caters to so
me of the world's finest coffee brands, providing a wide range of products including whole bean
, ground, flavored coffees, and specialty blends.
We will upload corporate data soon. Detailed personal employee information (passports, DLs, add
resses, phones, car information), details, financials, contracts and agreements, NDAs and so on
.
Diaco Global
August 21, 2026
•[ ransomware, retail ]
Diaco Global was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Other. Website: diacoglobal.com. Jewelry & Watch Retail
The Revel Collective
August 21, 2026
•[ ransomware, retail ]
The Revel Collective was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Other. Country: United States of America. Website: therevelcollective.com. Hospitality
